Fix exploit allowing ssl spoofing

urllib2 doesn't do any ssl validation
requests does by default