allow showing private repos with authentication