force ssl in production
Sign in-out implemented