fix precedence bugs
force SSL before authentication on client connections