multiscope auth functionality + test suite