set https in redirects in production