added SSL, correct password authentication