Use patched version of xml-crypto
Use https for package dependency
Merge pull request #11 from Asana/use-safer-xml-crypto

Use patched version of xml-crypto