fix: not auth if not SSL