github auth callback goes to /submit