added note about self-signed ssl