Create authorization token with correct scope