fixed allowing self signed SSL