use https instead of ssh, working around a travis limitation