Use HTTPS for non-tagged bower packages.