Add DEFAULT_HOST to env for redirections in oauth
Fix the scopes for oauth