ditch SSLv3 (POODLE)

also added secure ciphers