Add github oath strategy to supported auth

Under dev env, always use different session key when server restart,
this help us deleting some convoluted session reset logic in session
init.