Allow SSL enforcement for OAuth2 provider to be configurable