production env. force ssl = false