Don't specify SSL version, force peer verification.
The version of SSL we were specifying was old and insecure. Not
specifying any version should allow the client/server to negotiate the
most up-to-date version that both parties support.
Also, forcing OpenSSL::SSL::VERIFY_PEER for more security.