For Slack API, What's the different between scopes in settings under "OAuth & Permissions" tab and scopes when request an access token (https://api.slack.com/authentication/oauth-v2#overview)? Do they have to be the same? What happens if I request more scopes when requesting an access token and what happens if I request less?