er support for requiring ssl on everything