Use a fixed version of cm's external/curl

Change-Id: Ie2258ef234365b3ba0540da186a6e9a2c69022bf