simplify tls connection setup and make compatible with node v0.8

(note that, as discussed on #437, this makes no attempt at compatibility with node <= v0.4, because AFAICT the `.forever()` agent was not working there already.)