add payroll scopes. enable calling of #request_token (etc.) directly on a client.payroll. update readme with scope notes.