CLOUD-106 add Oauth2 scopes to security configuration