add user-read-email to oauth scope