Move disconnect execution to binding tasks

Disconnect must depend on the end of the binding execution, else it might be executed too early,
because of the early return of the request message.
Use TLS 1.1 for client certificate authenticated connections

There is a problem with BC which occurs only when using TLS 1.2 and a client authentication is
performed after a renegotiation.
Apache responds with a TLS Alert 50 (decode_error) and logs:
  SSL3_GET_CERT_VERIFY wrong signature type