Update server.py

We should ask for upstream cert only if there is:
1) no no_upstream_cert option specified
2) ssl connection to server is established