add support for ignoring certificate validation errors and plaintext auth (fixes issue #1657)
debug load via get, not post