add force_ssl to application config