When FORCE_SSL is defined use https. It's a fall back for Heroku apps because HTTPS isn't defined