Use SSL for API calls.