notes on github oauth