Use of scope should replace with authorize, i.e. scope/client_id/username.