Fix #6 Allow specifying additional auth scopes