git submodules should now work without auth