require SSL in production