don't be strict about ssl