CHANGE: module list now always downloaded over http to avoid CMake SSL support issues