Updated OAuthAuthorizationManager to support defining a required scope for a protected resource.