extend oauth scope