Fix wrong spec
Add scope based authorization example in dummy application