Always add offline scope when authorizing