whatever, we'll always do SSL