use cdn only if forceSSL is false