limit allowed ciphers

This single line has many effects including:
 - mitigate BEAST attack
 - make forward secrecy the norm
 - get an A+ rating on https://www.ssllabs.com/ssltest/

Tweak as needed.