added client-side SSL support, minus host verification