Update curl to depend on openssl and also update package to latest versi...

...on

this PR basically enables ssl, and thus allows things like git to use https (via lib curl)
I thought I had fixed that, in a subsequent commit in that series of commits. Here's an update at -- https://github.com/jcftang/hashstack2/commits/wip-update-curl

Sorry for the missed update in the hash. Does hashdist add some information from the URL to the hashed information. I suspect the last time I did this, I may have come across this problem....

1. user creates the package (with a specific hash) and downloads the file into their cache
2. user updates the package url but forgets to update the hash, hashdist doesn't download/update file and no warning is emitted. It could be to do that it's already present in the cache and build directory.