Accounts are created on first OAuth. Google and GitHub both work; we link them if the email matches.
Uses email + profile. Redirect URI must match APP_ORIGIN.
Google
Needs read:user and user:email.
read:user
user:email
GitHub