rename https_force to require_ssl