clone from https, so you can push too (git protocol is readonly)