Require scope for every request by default