use https instead of ssh in package.json