use http since https fails with sslv3