Make SSL actually work

* -startTLS needs to be called _after_ connecting the socket, otherwise
  it has no effect. Oops.
* Enable SSL cert hostname verification, to detect MitM attacks.