add util function to retrieve current identity
reimplement github oauth login
revert removing session status page
wrap authorize