disabled SSL by default