use https urls for submodules