dont use ssl everywhere in the app