Fix detection of authorized users

"user" is not a top-level field of the JSON data sent by github