use https for scm