added a forceSSL method in Controller class, some minor tidying