Fetch Hex with wget or curl

This way we can use https and do peer verification without bundling
certificates with elixir.
This removes the log message that `create_file` writes. Should we log something?