Force SSL and CANONICAL_HOST