require ssl in non-dev environments