make it work over ssl; just use localhost since this is running on the same server anyway