allow for sitewide SSL