Try to read current auth scope for the correct CSRF token