add to oauth a function to check whether an app has access to a specific scope