use curl -k as a fallback if NSURL fails to validate the server to make self signed certificates work