authentication and authorization mechanism changed; SSL made configurable