Add the scopes to the query to the auth server