switch to secure PyPI URL and remove obsolete mirror URLs
bump version to 0.2.9