use credentials api for github access token