more github client stuff and app auth