Fixes: SSL issue date and avoid dropping unrecognized Authentication header

This pull contains two changes:

- Avoid clients rejecting the certificate because of desynchronized clocks. Even if the CA cert is valid, clients reject it because the certificate is issued one second in the future.
- Do not drop the Authorization header when it contains an unrecognized authorization scheme. This fixes sniffing an Android application that uses GoogleLogin.