Download package using net/http. Includes timeout support