ignoring ssl for now