updated to use restricted scope token