remove force ssl in public controller