Give HTTPS download urls for SBT

...in celebration of SBT 0.13.6, which uses HTTPS to access Maven Central.
Use HTTPS urls in preference, where available