SSL is now forced on server-side