ask for less stuff in oauth

[zlrth]

switched scope from "user" to "read:user"; i.e. from "read and write all user data" to "read all user data."