use https for sonatype to workaround an issue where it redirects to https

Change-Id: I17697e0fa979e5fec89749fc118eade74655cba9