changed scope for auth