try force https in production
try gem for ssl enforcement