auth: add flag to skip SSL verification

It's possible, either for development or internal use, that you will
want to interact with a server that has an invalid SSL certificate. This
adds a flag you may use to disable SSL verification on HTTPS requests.