make ssl connection completely configurable and optional