turning off ssl in production, awful practice