Use https for git submodules

It's much more likely that people can use the https protocol
than the git protocol (many firewalls block the latter)