don't omit scope, duh

oauth3.core.js

@@ -698,6 +698,7 @@
       , { redirect_uri: opts.redirect_uri
         , client_id: opts.client_id || opts.client_uri
         , client_uri: opts.client_uri || opts.client_id
+        , scope: opts.scope
         , state: opts._state || undefined
         , debug: opts.debug
         }