Security fix: explicitly use only TLSv1

Re: poodle, see http://googleonlinesecurity.blogspot.ie/2014/10/this-poodle-bites-exploiting-ssl-30.html