ssl used only for authentication