added userinfo scope to oauth request