fix issue #2480: a custom SSL context can be used for HTTPS

- document how to use a SSLContextProvider
- factor default SSL context out of NettyServer