update readme and change deps to https github tarballs