removed forced SSL in production