Tweak README, use HTTPS