use https instead of ssh for submodules