force ssl before asking for password