add some explicit scopes, also fix xalan to test scope for the rest services