some cleanup. add https address for submodules
submodules bump
package.json bump