fix build; do not assume automatically determined ExternalProject dirs;
also use https instead of ssh URLs to make it work for people without
github account.