Force ssl in all cases in production env

It closes #611.