don't enable ssl by default for redirects...