Enable verifing the TLS connection in start_tls

Rather than just blindly OpenSSL::SSL::VERIFY_NONE-ing, verify the peer if
we're given a PEM formatted cafile.
Update documentation on start_tls method.

Explain using the start_tls method and the additions for SSL peer
verification.