force ssl in production mode