make ssl required by default