Always add openid scope