modify for SSL only