Hiding the secrets using a ENV hash. Forcing ssl in production