Hiding secrets using ENV hash. Forcing ssl in production