added forceSSL feature to force usage of https