Spec: update hackage url to hackage2 path

avoids a redirect from the hackage1 path