[Task APIFEST-31] Add scopes to access tokens; fix scope delimiter