Set VERIFYHOST and VERIFYPEER to the same value.

Curl separates them into two different checks, but for our purposes,
"don't verify" means "don't verify the certificate and don't check
the hostname".