do not force ssl in production