set ssl in production and force ssl for all pages