Auth cannot scale (is not stateless)

[BarDweller]

If we want to scale auth to multiple replicas, we can't use UUIDs as our nonce values being passed to github etc, we should use a self-signed jwt, signed with a secret that all auth instances know, so that each replica can validate the nonce passed back from any other.