Yeah, I feel like all the auth logic doesn't even make sense here. It should be handled by octokit.