**Describe the bug** When requesting for scopes for api usage, if the user is not logged in beforehand the scopes won't be the same as requested. **Steps to Reproduce** 1. log out 2. request for scopes: ``` /authorize_token?scopes=:feed,:subscriptions*,:playlists*,:history* ``` 3. log in 4. the scopes are missing the *  5. Call the same scope url again (while being logged in): 6. scopes are as expected  **Additional context** Current version: 2023.10.21-2414e7d @ master Browser: firefox (mobile and desktop)