Use HTTPS for all URLs

[weasdown]

Default config.py uses HTTP URLs for dependencies. Upgrade all of these to HTTPS and check the new URLs work.