SECURITY SSL: add option to allow insecure connection.
By default we should check CN and require a valid server certificate