quick fix for SSLv3 vulnerability (fallback to SSLv2)