Force SSL in production, remove an unused custom matcher