Added auth scopes, check scopes when getting the token.