Added OAuth2 Permissions Scope Handler

This scope offers a simple claim, administrator, that is true iff the user is a superuser.

@rocha @dsjen @mulby
Should we check here also for `is_staff`. I am a bit confused about the relationship of `is_superuser` and `is_staff`.