Re-scope GitHub authorization to view private orgs, check that user is in flatiron-school-students, and otherwise reject with a message