force ssl and only one host