add timeout for http, ssl backdoor for dev, assign server api