turn SSL verification off by default