Use ciphers as recommended by Qualys

This puts some TLS 1.2 cipher suites first so clients
which support them will pick those first. TLS 1.0 clients
will use RC4.

https://community.qualys.com/blogs/securitylabs/2011/10/17/mitigating-the-beast-attack-on-tls