config to force ssl or not