fixed SSL hostname bug with paypal