change submodules to use HTTPS URLs