implement SSL everywhere