use ssl for all requests