putting everything under sso and ssl