update package.json to use https instead git protocol