forcing app to use SSL in production