update README.md
add HTTPS configuration to TODO list