Move the update url to the package and add https
Closes #7, setting "published" as checked by default