move submodules to use https links