use https for cloning