Add scope validation and allow it to change

[jdjkelly]

• Make TS validate something about the scopes
• Make the runtime validate it (at config and at route level?)
• Allow the passing of scopes dynamically to the authUrl function
• Prototype SMART Auth v2 Scopes