add scope to oauth token response

For #76