consider using https for submodules

cloning the submodules failed. i know this behaviour from a couple of systems. seems to be related to servus, but not sure. (gitlab.com works)

anyway: consider using https for submodules.