make SSL verification configurable