use https server if kerberos is disabled