Use HTTPS PyPI URLs in doc/INSTALL.rst

PyPI will redirect to HTTPS anyway, besides, why allow the man-in-the-middle?