Initial work
Add sso, accesstoken scopes
Add client_id field to Authorization