commented out force_ssl = true in production