support nil masquerades and don't override explicitly set InsecureSkipVerify that overrides default false value

This is necessary for creating http clients that don't masquerade! We also don't want to override explicitly set InsecureSkipVerify setting on the ServerInfo.