Change to use wp_remote_fopen

When allow_url_fopen isn’t available it falls back to curl (more secure)