Honor the CURL_CA_BUNDLE environment variable.

This variable, if set, is the name of a file containing the trusted
root CA certificates.  Otherwise libcurl's defaults will be used.

Fixes #5 on github.