only create new bearer token if it doesn't exist yet for (uid,origin,scope)