update
force https when in production for url paths