Handle missing scopes

[msaspence]

In the abstract

If they are listed in the oauth list of scopes but not the installation send the installing user a message asking them to reauthorize
If they are not listed in either just slightening ignore - it is an unreleased feature