enable SSL verification by default