use least intrusive Github OAuth permissions (user:email, fixes #11)