sonatype repository seems to require https now