be more forgiving with scopes for /auth/github