fix omniauth with scopes