allow ssl in production