commented out ssl in application_controller