do not force SSL