Ship CA certificates in get-pip.py

This will allow rebuilding the get-pip script with
a recent pip version, one that downloads pip more securely.
get-pip.py: accept cli flags
get-pip.py: rebuild
Merge pull request #895 from g2p/develop

get-pip.py: ssl and --user support