Only check the certificate's host name if InsecureSkipVerify is not set.

If we don't want to check the certificate, then we don't need to check the hostname either. Other code calling VerifyHostname seems to wrap the code into a similar check.