lots of urls in the repo still point at bitbucket

[jogu]

e.g. this has two bitbucket links:

https://github.com/openid/fapi/blob/master/FAPI_2_0_Security_Profile.md