added: rejectUnauthorized (for TLS)