Simplified scope storage, add oauth_jwt table

* supported_scopes column is a space-delimited list of scopes permitted