default to SSL off (heroku platform quirks)