Disable host verification for insecure http connections

implements #12091

Also disable CURLOPT_SSL_VERIFYHOST in addition to CURLOPT_SSL_VERIFYPEER in order to be able to make calls to hosts that have self signed certificates.