added insecure flag to curl in tests

Previously curl was successful, but a recent test run had curl failing
with error 60. I'm not sure what has changed, but it's a self-signed
cert, so -k works for now
formatting
parameterized the SSL cipher list with better default

The default list of ciphers is from
http://blog.ivanristic.com/2013/08/configuring-apache-nginx-and-openssl-for-forward-secrecy.html

RC4 is still allowed...for now!
added SSL session cache for better performance