update vendored urllib3

Contains a workaround (fingerprint, random hostname verification) and a solution (pyOpenSSL) for SNI on python 2.

Intended to be included in 1.2 (#1267)