Add SSL in production
fixes
finish sign-in