submodule should be https based