force TLSv1 for https connections