switch to https
update README.md