move config.allow_ssl_in_production to spree.rb