add cert verify override

[mwfarb]

It is useful to auto-detect some domains for self-signed debugging certs, like localhost and *.local. It would be better to have a manual do not verify switch for certain demo conditions like arena in a box.