fixed scopes in oauth2tests