it should be paired with endWebViewTLSSession