Force https in staging and production