Add Chris Bandy to the list of contributors
Load crypto/sha256 in ssl_test.go

Go 1.0 doesn't seem to be automatically loading all the available hash
algorithms, which made the tests fail.  Fix by importing crypto/sha256.
Use cURL to download the PGDG key
Fetch only the PGDG repository