Allow to specify more than one scope for an endpoint
Allow to pass extra params for tokens
Allow to pass required_params to token

required_params will be matched with actual params to check if the token
may be used for authorization. For example if { job_id: 44 } is passed
as a required param, the token will be rejected for GET /jobs/33