see if there's a way to auto-check or force user to give app all scopes

[bubakazouba]

if there's a way to do this then remove the "https://www.googleapis.com/auth/spreadsheets.readonly" scope