allow user scope for github omniauth API