remove production.rb from the repo
ignore prod.rb
force ssl for production
updated devise to use a secret for the key