[support] ssl + login best practice