move submodules to https