force ssl in production
rails security update