Make GitHub login work for previews #19
Description
The production callback will need another parameter for the actual (preview) callback url, which will be validated and guarded by CORS. This way outside PRs can use GitHub login without having the secrets exposed.