fix submodule url and tornado version req