Correct certificate validation

The previous iteration appears to be performing certificate verification against an embedded self-signed certificate.  This changes the client to verify the server-provided certificate against a CA package.  It also adds an option for overriding validation in a development environment (primarily those developing against local bitpay instances).