add SSL in production
beginning of chapter 8