Add an exception for insufficient OAuth scope

[ches]

For instance, you need the message scope to use the messages API resources.

From Josh on the API team, the response will be an HTTP 400 with JSON body including obj['error']['type'] == 'insufficient_scope'.