Use http rather than https for download link

Our SSL cert is self-signed and raises a security warning the first time
the user visits the page, which may be confusing and/or scary. There
isn't much reason to use SSL here anyway, so just use plain unencrypted
HTTP.

Thanks to Craig for noticing.