Fixed: WebSocket _changes feed wouldn't connect over SSL

It would try to connect over plain HTTP and fail, because I put the
-startTLS: call too early.
Also, I enabled cert hostname verification, which is an important safe-
guard against MITM attacks.

Fixes #332
Fixes #333