grab-lily: change cloning protocol to https

Kieren was getting some strange error when trying to run the script,
and we suspect that it may be related to the protocol used.
add todo