Add some locking around the initialized test to make it thread-safe.

Make the code more aware of whether it has initialized NSS itself or
whether it was initialized in another library linked with libcurl.

We would always shut down NSS during cleanup whether we initialized or
or not. Now we will only shut it down if libcurl initialized it.

rob