Force ssl when environment is not local.
Update application to user .env.php to protect senstive data.