version bump: Prefer Rails config.force_ssl and add test as non-TLS