use https for the root route according to config.force_ssl