put SCOPE in to use for OAuth2 scenarios