http: make ustream_ssl optional, only use provided ssl context