Access token docu fixed

src/Squidex/Docs/security.md

@@ -6,7 +6,8 @@ To retrieve an access token, the client id must make a request to the token url.
         -X POST '<TOKEN_URL>' 
         -H 'Content-Type: application/x-www-form-urlencoded' 
         -d 'grant_type=client_credentials&
-              client_id=[APP_NAME]:[CLIENT_ID]&
-              client_secret=[CLIENT_SECRET]'
+            client_id=[APP_NAME]:[CLIENT_ID]&
+            client_secret=[CLIENT_SECRET]&
+			scope=squidex-api'
 
 [APP_NAME] is the name of your app. You have to create a client to generate an access token.