Add scope privileges for my web app