Use https for hackage URLs