use ssh instead of https