force ssl in production
force ssl only in production