force ssl for production