enforces ssl for production only