force tls for registrations as well