Added tarball url rewrites

See https://github.com/paypal/kappa/issues/16.

This change rewrites tarball URLs in package to point back at kappa. 

This is so that requests to download the file will pass through kappa and allow for interception such that one could perform whitelisting, metrics, etc.