balanced coffee script fixes and only force SSL in production