Updated ssl_match_hostname based on latest bug-fixes

This fix is intended to fix a denial-of-service attack, which doesn't really
matter to 0install, but we might as well have the latest version.

CVE-2013-2099
Add fish-shell command completion
fish-shell: Manually complete file arguments (only when allowed)
Fixed --refresh with "download" and "run" for apps

Reported by Tim Cuthbertson.
Merged changes from master