force ssl by default

Shouldn't that be in the same sentence?