added log to warn against disabling certificate verification in production