Rewrite of 6.4.2 Authorization scope

in recent weeks there have been many additions to already rewritten
ssections, this is one such addition. Please check and merge.

(I'm submitting the oAuth rewrite from @paul-esch cherry-picked against latest master and with line lengths fixed up).