explicitly set the trust store password, seems the newer versions httpcomponents otherwise uses an empty string (instead of the defacto "changeit")
Merge branch 'master' into authz