replace geturl with a shell out to curl - to fix broken certificate management