Don't require packages to be from hackage.haskell.org

Instead of requiring that packages come from the 'main' hackage server,
allow them to come from any mirror.