Don't use SSLv3.

Also add some security hardening headers.