enabled SSL in production (config/env/production.rb)