added force SSL in production env