Have to use http sourceforge instead of https in order to avoid redirect

Otherwise it would depend on which mirror you got whether you would get a bad redirection. Note our other pulls from sourceforge (that we got from omnibus-software) are also http, likely because of this problem.

Fixes an issue introduced with: !1692 (merged)

where we would continue to get the ssl downgrade redirect problem when sourceforge was redirecting to a mirror using http