Limit scope for github

Don't ask for more than we need.  Probably need 
an override mechanism sometime
Add a logout endpoint