Fix scopes for access token creation

[Cryma]

Not quite sure why this is commented out, as it's the correct way to send scopes when creating access tokens 🤔