set Net::HTTP verify_mode early enough to take effect

see https://github.com/ncr/rack-proxy/issues/36