Set defaultPolicy to not allow invalid certs
Updated Security Unit Tests
Merge pull request #1327 from kcharwood/security_fixes

[2.0] Default Security Policy should not allow invalid ssl certificates (and unit test updates)