forceSSL stuff
force ssl on production?
remove yaks