pass the owner scope for oauth token requests