disable SSLv3 to prevent POODLE attacks; sane default ciphers