remove crypto, only require ssl