use OAuth keys instead of SSH keys

Too much of a pain to convince `go get` to use SSH.