more tests
updated docs, rename to `grantedScopes`
move the section in the docs
assert that the api key and account are enabled, fail auth otherwise