feat($oauth2): Re-examine scope #1
feat($oauth2): Check for token client-side before requiring login closes #1