use https (instead of ssh) for submodule