port to dan's metadata url

- also 'fixes' sol10 download problem by simply forcing to non-ssl
  (i could try to force no cert validation, but at that point what
  is the point of SSL?  if you think the NSA is MITM'ing you then
  don't use sol9/sol10 -- not our problem).