Add an option to request a readonly scope from GA

Without this option, gapy requests access which allows the token to be
used to view and modify account settings, which isn't needed if, say,
you're just using gapy to monitor data in GA.