testing without SSL
testing again, force  SSL