remove 'force_ssl' from ApplicationController