fix typo in user_spec tests
force ssl in production
chapter 7 exercises