allow self-signed certificates for testing