removing the ssl requirement for STS