Use github oauth tokens for the API in production