Cleanup
GitHubSession: init a None token, only add auth header if one is set
Don't use a token by default, add --use-token option

- search rate limit in practice is 6-7 per minute, which is probably plenty.
Handle over-rate-limit 403 message