set url production_url to secure http