Switch npm pull from sha to use http