Permitted file extensions should now be case insensitive
Application will always redirect to https when not in dev mode