configuring app to use ssl in production