sessions and oauth through github