add force ssl in production