Updated API for delegation token

If it does contain `scope` but not `passthrough` you should add it as well.