Update README.md with note about cloning over HTTPS