Add scope limits for the userinfo scope
Tweaks to authorizations