add README and clean up some SSL options