Use https to pull dependency