update to npmconf with scoped credentials