update production path to use HTTPS