Update mod_fcgi to 2.3.9, use non-redirecting URL #16

This should prevent the previous issue where 2.3.7 had the "wrong SHA1" because it was actually downloading 2.3.9.