add SSL for production
finish chap 7