Remove the private set on Scope

In order to get the refresh token, refresh_token scope needs to be set.