fix login

The scope is read only for the login method we are using. But it does not look like we need write access so far.