force ssl for /users* and /admin*
force ssl for /users* and /admin* only for production