added option to disable http (disable_nonssl) to allow exclusive https operation