fetch github deps via https instead of ssh