Close a security hole by using https to fetch artifacts instead of http. Should never download software over http. See http://blog.ontoillogical.com/blog/2014/07/28/how-to-take-over-any-java-developer/
Merge pull request #3303 from benmccann/https-repos

Close a security hole by using https to fetch artifacts
Fix a typo in CSRF docs
Merge pull request #3305 from benmccann/csrf-typo

Fix a typo in CSRF docs