fix: use AuthAction's redirect implementation
fix: don't request rw access to github user data