Turn force_ssl off and add proper rules for http