fix: update token, scope