do not verify ssl cert if api_root_url is customized