enable 'force_ssl' in production.rb