require ssl in production or staging.