change onlySSL to sslOnly