add http client - configurable with a timeout and ability to ignore SSL verification