fix scope check
do not store token from /auth/github