temporarily allow production to not use ssl