readme: use HTTPS-url in Setup