force ssl if present