use token for oauth github authentication