Move downloads to HTTPS

Fixes #917 hooray.