fix https in download urls