removed ssl true and hardcode routes