force redirect to ssl
correct ssl redirect