do not use client credentials for /auth/github