Prefix roles assigned by scope

[dkarlovi]

Scope foo becomes ROLE_OAUTH_FOO instead of ROLE_FOO.

[DPerkunas]

+1 for this. I like this idea. This prevents accidents, such as granting someone a role of ROLE_DELETE, in a large application, or ROLE_ADMIN.