switch to https for submodule url to allow auth less cloning