Forcing SSL in production environment