Add cipher list (admittedly hacky), fix POODLE (no-sslv3), ensure we're passing X-Forwarded-For/Proto