update submodule urls to read only