README: update to use https