use https for public submodules