Updated API for delegation token

use passthrough as default scope for renew id_token