assemble gh auth url better