add auth scope