use https for submodules

it would appear that travis doesn't like ssh