use https protocol instead of git/ssh to pull dependencies