update client to use SSL for code flow