Scope list returned from Auth does not match requested

[AGenius]

The returned Scope string has all the requested scopes but includes some additional ones not selected . also the scope string order is not the same as passed to the auth process.

[AGenius]

Due to the issue being from the API. Added a temporary property in the config "StoreReceivedScope" - this defaults to false. if such time the XeroAPI is fixed this can be set to true.

[AGenius]

Apparently this is to do with previous scopes used when initially authenticated.

Relates to issue to add "revoke token"