why `verify=False` here? At this point we should have a valid certificate.