update ssl cert location and turn on sso