And... not everyone is on SSL so let's make that s optional :P