Use http remote for cm so manifest fails don't popup login prompts

Change-Id: I5f8e920e07de5ca76204ec8809ccc2517e82a33b