Don't force SSL in production

We'll take care of it (for free) using CloudFlare