update README.md: update GM link, add note about HTTPS