add notification to non-ssl users