Only force SSL when environment is set to production