#36 force_ssl in production