add options to disable hostname verification