quieten the logging of assets in development
enforce ssl
don't verify ssl unless production