uncommented config.force_ssl in production config file