fixed one more test, as rewriter now omits per-protocol default ports from URLs
doing SSLContextCollection certificate handling out of the serverSocket's accept() loop