testing if oauth is in scope