validate scopes