no ssl and accept notification url