use 'localhost' for ssl certs