turned force_ssl off - when turned on server currently redirects request in a way that will never complete