allow user-specified ciphers, with sane defaults

The default SSL ciphers in Ruby's OpenSSL wrapper leave something to be desired.  This PR overrides them with sane defaults, and allows the user to user their own as well.