Switch to HTTPS dependency repositories (where possible)

This is meant to improve the security of our deployables. We still depend on HTTP (only) repositories though.
The repos switched to HTTPS have properly signed X.509 certificates.
I'll remove this and test, and apply the same treatment for <code>project/plugins.sbt</code> too