tryAuth with even more correct scope :)