requiring ssl for production