[2.0] Default Security Policy should not allow invalid ssl certificates (and unit test updates)

The latest updates to AFSecurityPolicy broke the unit tests, which are fixed with this pull.

In addition, I believe `defaultPolicy` should NOT allow invalid certificates by default, so I changed that setting. Would like to know if that was just an oversight and added in by mistake, or you believe that should in fact be the default.