re-force SSL