Add scope to Strategy declaration

The scope in the authenticate method determines which permissions the user is asked to allow, whereas in the Strategy declaration it affects which fields are requested to be include as part of the profile is inherited by authenticate unless otherwise specified.