Added user permission(scopes) validation methods to api controller. Now API request can be validated based on users permissions.
Changed api/user_controller, api/comments_controller, api/status_messages_controller classes that it validates access token and user permissions before allowing apps to retrieve user data. Changed relevent routes.