up submodules to use only https