use the k option in curl to ignore ssl mismatch