do not start tls if server accept starttls only

If user wants StartTLS feature, try to open insecure connection first,
get stream features, and, if server support STARTTLS, send STARTTLS and begin
secure session.