REFACTOR: move ssl to http.server