Fix installation instructions to avoid piping curl to a shell.

curl http://foo | sh is common but quite dangerous. If the connection is interrupted in the middle of the transfer, sh may run incomplete commands (and `rm /tmp/blah` becomes `rm /`).

Using curl -o ... && sh ... helps as curl will fail if the server sends a content-length header and the response size differs.