use HTTPS url for ES submodule