This will allow API servers to limit access based on scopes.
The JWT includes the user email and username, along with details pulled from the original access token (e.g. scope, expiration). ECOM-4221
- Updated django-oauth2-provider libraries - Added test ensuring issued access tokens have the basic scopes needed to get user info ECOM-4197