package.json: change repo url to https