only allow TLS for SSL connections

This fixes the POODLE SSLv3 vulnerability
cc @dangoor this is already fixed in the deployed app, but this is the PR for the fix.
Yes, that seems like a good solution. I'll bring up a new PR. Thanks.