add missing headers for SSL