turn off strict SSL for now