a few ssl improvements
separate out needs-handshake from SSL-is-open status

no longer responds to "no request"