Update README.md

Clone over HTTPS (prevent "Permission denied (publickey).").
Add missing `npm install`.