identity: include scope when validating account recovery token

Streetwriters.Identity/Controllers/AccountController.cs

@@ -255,6 +255,7 @@ namespace Streetwriters.Identity.Controllers
             return Ok(new
             {
                 access_token = token,
+                scope = string.Join(' ', Config.ApiScopes.Select(s => s.Name)),
                 expires_in = 18000
             });
         }