force https in production and upgraded express
added better test for production env
fixed bug in https redirect
distinguish between callback url and server url