Forces generation of secure (https) links in emails in production

FIxes #605

No tests since this is a simple production config change. I'm open to adding some if someone can point me in the right direction though.
use hash 1.9 syntax on both options