to load "verify_locations"

proceed fine with the already existing options, just having a different
internal library default for capath.

working for "IPv6 enabled" libcurls yet, but should be pretty easy for
someone to adjust.

weren't used anyway and mostly caused confusion

added two new tests to test the absense of -k to insecure SSL sites

Keith MacDonald found it.

spelling error

descriptions, slightly edited by me.

multi-threaded use