Use TLS (HTTPS) to retrieve composer.phar

Set the default of the `$phar_location` location to use HTTPS, which provides some guarantee as to the authenticity of the file being downloaded.