change submodule urls to https so they are not read-only