diff --git a/src/main/docker/Dockerfile.jvm b/src/main/docker/Dockerfile.jvm
index ee59808..1300472 100644
--- a/src/main/docker/Dockerfile.jvm
+++ b/src/main/docker/Dockerfile.jvm
@@ -80,11 +80,13 @@
 # You can find more information about the UBI base runtime images and their configuration here:
 # https://rh-openjdk.github.io/redhat-openjdk-containers/
 ###
-FROM registry.access.redhat.com/ubi9/openjdk-25:1.24
+FROM registry.access.redhat.com/ubi9/openjdk-25-runtime:1.24
+
+USER root
+RUN microdnf install -y ca-certificates && microdnf clean all
 
 ENV LANGUAGE='en_US:en'
 
-
 # We make four distinct layers so if there are application changes the library layers can be re-used
 COPY --chown=185 target/quarkus-app/lib/ /deployments/lib/
 COPY --chown=185 target/quarkus-app/*.jar /deployments/
diff --git a/src/main/java/dev/dinauer/oidcproxy/ProxyResource.java b/src/main/java/dev/dinauer/oidcproxy/ProxyResource.java
index aa00148..3a09b89 100644
--- a/src/main/java/dev/dinauer/oidcproxy/ProxyResource.java
+++ b/src/main/java/dev/dinauer/oidcproxy/ProxyResource.java
@@ -59,6 +59,7 @@ public class ProxyResource
         if (routeOptional.isPresent())
         {
             ProxyRoute route = routeOptional.get();
+            LOG.info("Matched route with target '{}'", route.target());
             try
             {
                 HttpResponse<byte[]> response = forward(context.request().method(), extractSession(context.request().cookies()), route.target(), concat(dropRoute(route.segments(), requestSegments)));