curl VERIFY_HOST opt 1 is deprecated

This change factors out the setting of these curl opts
as well as making sure the defaults are good!