submodule access via https