update submodules to https