giving up force_ssl because https detection does not work