only request emails when covred by scope
improve getAccessToken