use https for submodules