changed to use SSL