force SSL to true