before isAuthenticated SSL validation must be called