add tls option that forces https