How can I retrieve a bearer token containing scopes required to access all parts of the xsuaa API (such as uaa.admin, scim.read, scim.write)?