Add granular scopes to login/auth

[barryf]

Currently Micropublish allows you to log in with one of two preset scopes:

1. post
2. create update delete undelete

It's not possible for a user wishes to log in and only select the create scope, for example.

Allow for individual scopes to be selected and sent for authorisation.