API and sites use SSL