Lock username to GitHub username when authenticating using GitHub

[cpradio]

That also isn’t a good test. Staff seem to be immune, here is the logic:

lib/guardian/user_guardian.rb

So you need a regular member.