force SSL even with old curl