fixed redirect to unsecure if force_ssl is set to false