adding note about GitHub OAuth2 access tokens