removed force ssl from auth