changes for json_encoded auth scopes