switch to sha256 checksums

* upgrade some broken packages
* correct some broken urls/checksums
* use secure urls where possible
* use stable url for ncurses
* some whitespace fixes

Remaining md5sums either didn't download or
didn't pass checksum tests.

python-setuptools/PKGBUILD

@@ -10,7 +10,7 @@ license=('PSF')
 url="https://pypi.python.org/pypi/setuptools"
 makedepends=('python' 'python2')
 source=("https://pypi.python.org/packages/source/s/setuptools/setuptools-${pkgver}.tar.gz")
-md5sums=('a9028a9794fc7ae02320d32e2d7e12ee')
+sha256sums=('381e78471fb0eff89c4b1a219e8739f48dd87c76ad2d3a790010ca3a62ee29a4')
 
 prepare() {
    cd "${srcdir}"