remove forced SSL