Initial code to map external authorities to scopes
External scopes are not added for client_credentials grants

Externally authorized scopes now don't appear in the approval flow
Minor updates
Fix the owner password flow to work with users authenticated by the login server
Code cleanup

Error conditions were not being handled correctly
Allow the user to send additional authorization attributes that are added to the token