For koji, use http links, not https.

dgilmore suggested that we use http urls, not https (since koji has a self-signed certificate.. end-users are going to get a big ugly warning message).

Any comments?