scope & refresh_token comments