All submodules https

Keep all submodules https so they're accessible behind corporate firewalls.