allow user to login without private repo access