generalize force_ssl and return if redirect_to