don't use AllowAllHostnameVerifier
Merge pull request #394 from nelenkov/dev

don't use AllowAllHostnameVerifier