Use TLS (HTTPS) to retrieve composer.phar

Set the default of the `$phar_location` location to use HTTPS, which
provides some guarantee as to the authenticity of the file being
downloaded.
Merge pull request #6 from mattbostock/patch-1

Use TLS (HTTPS) to retrieve composer.phar