enable SSL for logon, ignore invalid CAs & encrypt saved password in registry