Defined session, read, and userinfo scopes

Defined session, read, and userinfo scopes. Added unit test to check
scope permissions and expired token
Modified to return 'expires_in_seconds'

Modified to use 'expires_in_seconds' which returns the remaining time
for the authorization.