Fix #306: disable force_ssl for grape APIs

* Put force_ssl in ApplicationController instead of in the config files
  because this would not influence the grape APIs.