switch to fkooman/oauth-common for Scope handling, rename package to fkooman/oauth-rs