force ssl in production env