update scope for authorize