Close a security hole by using https to fetch artifacts

Backport of https://github.com/playframework/playframework/commit/993ca07d3e917109c4e9627f91c405bb12e96248