Don't access :allow_ssl_in_* during initialization

This causes changes to `Spree::Config.allow_ssl_in_*` (see) to be used at runtime without a server restart.

The `:if` parameter of `force_ssl` is only available in rails >= 4. (So this should work for spree >= 2.1)