forcing ssl in production mode