Add ability to use oauth on all paths in an API, make scopes optional

• Add ability to use oauth on all paths in an API, make scopes optional

Added option to enable drupal oauth on all endpoints in an API, regardless of annotation presence. This was done to more easily handle APIs like USS.

Additionally, to allow for more nuanced downstream scope management, scopes were made optional. This auth filter will likely be removed in the next year, so heavy investment isn't a good use of time in this case.