Add optional scope parameter for retrieving token.

Added retrieve_access_token/5 that also accepts a Scope parameter
containing the desired scope of the resulting access token.

I haven't been able to test this with the client credentials flow.
It seems to be working both with and without explicit scope when using the password flow.