force ssl in application controller