check required scopes in user authorization request

[zeeshanakram3]

Addresses #59

[kdembler]

I won't be able to look at this, @drillprop is the better person for review