use llvm's cxxflags, and avoid NDEBUG. closes #2819