Have to use http sourceforge instead of https in order to avoid redirect

Otherwise it would depend on which mirror you got whether you would get a bad redirection. Note our other pulls from sourceforge (that we got from omnibus-software) are also http, likely because of this problem.

Fixes an issue introduced with: https://gitlab.com/gitlab-org/omnibus-gitlab/merge_requests/1692

where we would continue to get the ssl downgrade redirect problem when sourceforge was redirecting to a mirror using http