verify server certificate when doing HTTPS requests