forcing https on staging