Added 'include_granted_scopes' to allowed URL parameters (see: https://d...