fixes #194 - makes some appropriate properties protected instead of private
fix undefined classes.
fixes #192 - reference errors and adds tests
fixes #197 - adds support for 'false' default scope in Token controller