Update oauth2 docs to reflect scope updates.