Update config.ru

Make sure no one turns off SSL verification in production apps.