Prefer forward secure and ECC cipher suites

I saw https://getsatisfaction.com/newsblur/topics/weak_crypto_available and realized a pull request might better communicate the ease in this improvement.

Configuration changes guided by https://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy

Test results can be confirmed with https://www.ssllabs.com/ssltest/analyze.html?d=newsblur.com