Don't allow insecure SSL connections w/curl

The `appdmg` and `pkgdmg` providers were calling `curl` with `-k` which allows curl'ing over insecure HTTPS connections. I can't see why this would ever be desired, and many connections will often fail when attempting establish a connection.

This PR removes the insecure option.