force ssl on orders controller in production only