Add test for scope param in Authorizations#destroy_all