changed default behaviour to use SSL