add default HTTP verify_callback, allow customizing it

verify_callback can be used for obtaining details about failed SSL verification,
the default implementation just logs the details