Update README.md

Added note about HTTPS