remove (for now) SSL in production