forces https for unicorn apps