force use https if production
update README