submodule cloned using https instead