Use 3.4's ssl.create_default_context when available

Related #472 
A little unclear on why it is dangerous, maybe "Attackers can decrypt messages sent with SSLv2, so disable it." ?