force using TLSv1.2