forcing ssl in production