title: OAuthWebSecurity with Facebook not using email permission as expected
body: <p>Using the new OAuthWebSecurity for authenticating with Facebook, I added the email permission on my Facebook application. Now, as I can read, I need to define a scope to be able to actually get the email in the result. So far without the scope I'm not getting the users' email and am not sure why as I can not see where to define the "scope".</p>
  
  <p>It's just a rip of the <a href="http://en.wikipedia.org/wiki/ASP.NET_MVC_Framework" rel="nofollow">ASP.NET MVC</a> 4 default authenticationcontrollers external login.</p>