switch to ssl in production