make ssl authentication optional