Add include_granted_scopes option for incremental authorization