Fix auth scope route now that we're using XM.SimpleModel.
Merge pull request #216 from bendiy/master

Fix broken GlobalPrivs to session