force ssl in non dev environments