Revert "we should force ssl  in the app and don’t rely on the webserver’s redirect rules."

This reverts commit b36c1d089eb05679bddd740eca991912421494e4.
Merge pull request #2086 from opf/hotfix/revert_force_ssl

Revert: force ssl in production