use a link to submodule that does not require authentcation