If an app requests an auth token and one has already been generated, re-use the existing one if the scopes match.