Use http.debian.org instead of cdn.debian.org

According to http://http.debian.net/ this redirector has a lower chance
of an inconsistency. One of these inconsistencies is an expired Release
file, which makes it impossible to update.