Select versions of pip that support https.

Pip versions *before* 1.3 do not support https download of package and
therefore this makes our postinst vulnerable to mitm attacks.