Use strict https headers and redirect from http to https in production mode

Use strict https headers and redirect from http to https in production mode #158