Update Scope Cookie to Reflect Scopes in Access Token

[ncarchar]

What would you like to be added:

Make the scope cookie accurately reflect the scopes in the user's access token.

Why is this needed:

The current implementation does not always reflect all the scopes present in the user's access token. This can lead to inconsistencies if the access token contains scopes other than 'phone email profile openid aws.cognito.signin.user.admin.' This becomes a problem when the client needs to access the scopes, but the token is marked as HTTP-only.

I can submit a pull request with the necessary changes to address this issue.