fix submodules for using https