proper scope for github oauth