production.rb: config.force_ssl = true