only put up the ssl if it's called for