github oauth permissions reduction

no need for write access on user scope (read access on user scope is enabled implicitly)