use TLSv1 (closes #2)