docs++; describe ciphersuite workaround
hostname on cert doesn't match 'localhost'