socket_connect_prepare(): refuse to establish TLS connection if TLS-banned.

This will fix endless re-connections to a single host when the initial
connection failed and it is being retried with TLS: the old code was instead
clearing the TLS flag silently, thereby defeating the retry logic from upper
layers and creating the loop.
Updated GeoIP databases.
Added token keys for version 1.1.
Release 1.1 stable.
Release 1.1 stable.
Fixed English typos in user-visible help strings.
plist_random(): typo prevented correct random selection.
get_params(): return immediately if we cannot decode the push-proxy URL.

Jumping forward to the error label must be avoided if we were unable to
parse the URL to get the URL parameters.
shared_file_get_index(): fixed lower boundary of assertion.
fi_find_aggressive_candidate(): prevent division by 0 if no starving download.
inputevt: log routine name used for event_set_mask(), on problems.
Fixed possible race condition between bg_task_wakeup() and bg_sched_sleep().