Enforce SSL in production by default
Allow HTTP-only for ^/repo_hook to support already-registered GitHub repo hook URLs