TODOS How to sync remote custom scopes to local? Cache auth token locally in redis or similar Keep user in DB in sync with auth token? Complete rest of authentication endpoints https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-define-resource-servers.html