asks ssl only on "edit" endpoints