link to GH / minor fix on oauth scopes