added config to force ssl