switching externals to https