Try forcing https on form actions in prod only