Improve SSL configuration for nginx-based load balancer

* Redirect to https:// version of Tokyo mirror and bundler site

* Add TLSv1.1 and TLSv1.2 to supported SSL protocols list

* Change SSL ciphers list to protect against BEAST attack, disable
  anonymous/weak ciphers, and prefer better ciphers before less
  wanted ones