Add user_name to allowed list of default client scopes