use ssl api endpoint by default