set config.force_ssl = true for production env