Alter Api to only include guid and key
Add Scope to AccessToken