Consider `options.rejectUnauthorized` when pooling https agents

Not doing that was causing `rejectUnauthorized` option to be ignored.
Use `rejectUnauthorized: false` in tests