use https urls for submodules, so travis can clone them