include submodule via HTTPS