enable https and prevent sniffer attack