Force SSL via rack as fallback to nginx