add HTTPS for production