4.9.0 Send access token via auth header instead of query params

Since Github is deprecating sending access token via query param it should be sent over auth header instead.

https://developer.github.com/changes/2019-11-05-deprecated-passwords-and-authorizations-api/#authenticating-using-query-parameters

#165