allow selfsigned curl