provide user selected scopes for authentication request