add inScope() token scope checker