Add note about contributing
Add note about #319 and merges
Download WordPress.org header/footer over HTTPS.

WordPress.org recently switched everything to force SSL, and curl wasn't following the redirect, so it was just downloading Nginx's default 302 page instead of the actual header.

Fixes #2