Central SSO Gateway

GitHub SSO via oauth2-proxy is served under /oauth2/.