update wording about SSL pinning