Fix problems in ruby 2.1
Add spec that queries howsmyssl.com and fails if we are "Bad"
Improve ssl security

This was largely done in part to ruby-core's refusal to take
responsibility and accept a patch for ruby's bad SSL defaults.

- disable some insecure ciphers based on advice from howsmyssl
- don't force TLSv1; now uses TLSv1.1 by default in my tests.
- disable compression to avoid CRIME attack