add scope to states table to be able to use it when it does not come back with access token response at token endpoint