add SSL to elastic and only allow GET if accessing through plain http