enforce SSL on wizard