ENH: don't hit the db on every call, just grab the session cookie and set on req
TST: use tap-spec for nice test printou
BUG: don't open a new window to login to github
CLN: unecessary api calls