update basics of auth for editable scopes
cleanup quotes and simplify
handle editable scopes a bit differently