Fix/Improvement: OAuth2 needs a slightly different setup call

 * also introduced 'service_scopes' and 'service_base_url' in configuration