forceSSL now calls isSecure instead of isSSL