install dependency via https