just tested it and this option is needed.
and apache is default configured for stash for non-ssl