default to following redirect & no SSL certificate