updated submodule to "http://" because otherwise some systems complain about missing TLS certificates, and this is read-only anyway