config.force_ssl = true for production mode