switch to sha256 checksums

* upgrade some broken packages
* correct some broken urls/checksums
* use secure urls where possible
* use stable url for ncurses
* some whitespace fixes

Remaining md5sums either didn't download or
didn't pass checksum tests.

python2-fastimport/PKGBUILD

@@ -10,7 +10,7 @@ license=('GPL')
 url="https://pypi.python.org/pypi/fastimport/"
 makedepends=('python2-distutils-extra')
 source=("https://pypi.python.org/packages/source/f/${pkgbase}/${pkgbase}-${pkgver}.tar.gz")
-md5sums=('ed3ce371af38c9125bd24b95c1ca82f0')
+sha256sums=('ad0804025ed67bde2e1250299af645197cc3a8785baf4d02cba95f2f4a391d4d')
 
 package() {
   depends=('python2>=2.7')