change WWW-authenticate to ssl