Add scope parameter to user/client identity

@phpnode Feel free to review later.

This change enables us to specify a scope when we request an access token. The scope of course is only assigned, if the server grants it.