forcing HTTPClient to avoid SSLv3 correctly