winhttp: only do certificate check for SSL If we're not using SSL, don't call the user's certificate check callback.