Update README.md

Clone over HTTPS (prevent "Permission denied (publickey).") and add missing `npm install`.