SSL and auth on by default