don't be strict about ssl
Merge pull request #3 from andyroyle/default-to-https

don't be strict about ssl