Verify ssl by default

Verify ssl certificate by default. It breaks backward compatibility, but more secure.
Introduce verify_ssl parameter to disable ssl verification.