forcing https in prod