README: default to https pushing