fix(webapp): fold S2 token scope into access-token cache key

fix(webapp): fold S2 token scope into access-token cache key #494