Updated cipher suites

Using recommended configuration from https://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy
The best we can get without dropping support for IE6.