ignore ssl certificate and private key
adding header authorization