download client via SSL

Latest standalone installer script references a *tgz* available via SSL. Maybe hold off on merging this until they fix heroku/heroku#1085.