Using SSL by default and validating server certificate