force ssl to false