use https for modules, some folks have firewalls blocking git

i was concerned some people would get user/pass inputs on commandline,
but with my ssh agent env vars unset, that doesn't seem to be the case.

so it looks like we can safely use https to clone/fetch all deps