Periscope

I think it would be better to check the scopes if that's possible. If the OAuth2 request token has the scope `cloudbreak.autoscaling` then we can return true, so we are not completely bind to the  Periscope client.