force ssl set in production