prefer SSL connections