use only https for submodules