downloader: Don't verify SSL certificates; workaround for expired ocamlforge cert

Signed-off-by: Euan Harris <euan.harris@citrix.com>