Security: Fix pom.xml download locations

Maven will now only download from the official
repository locations, (that, hopefully are slightly
more secure than the ones that we previously had).