added force_ssl to users controller