use https for 3rdparty modules