unless we go with some other authentication method (other than github)