disable ssl by default, fix credentials