first pass at vendor URLS
allow use of self-hosted R binaries
remove debug message