fix(OAuthGithub.js): Use the server's callback URL, also make session se...

...cret more secure