https://blog.jupyter.org/posts/2018/security-fix-for-jupyterhub-gitlab-oauthenticator/