disable SSL for now