resolves issue11: add profile scope to omniauth att provider

application is able to authenticate and authorize user via omniauth-att, receives oauth-token