make sure that it actually uses ssl for https.