tryAuth with correct scope