added default ssl_protocols directive to mitigate the #POODLE vunerability