make it possible to skip SSL in production

This is a hack to allow us to host the staging site without ssl - since
this would be problematic.