Revert: force ssl in production

this shouldn't have made it into the release