moved force_ssl from application to user to test