Use TLS (HTTPS) to retrieve composer.phar

Set the default of the `$phar_location` location to use HTTPS, which
provides some guarantee as to the authenticity of the file being
downloaded.